Lucene search
+L

3369 matches found

Kitploit
Kitploit
added 2026/08/26 10:56 a.m.3 views

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Apache RocketMQ Schwachstelle für beliebiges Dateischreiben Exploit Demo Übersicht Tatsächlich wurde die Schwachstelle für beliebiges Dateischreiben CVE-2023-37582 in Apache RocketMQ bereits in der CVE-2023-33246 RCE-Schwachstelle behandelt. Allerdings ist der für...

9.8CVSS0.90427EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

MAL-001

MAL-001: FreeMarker Server-Side Template Injection in Liferay Portal In Liferay - Portal =7.4.3.12-ga12 wurde ein Problem entdeckt. Durch das Einfügen schädlicher Inhalte in die FTL-Templates kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die offengelegte...

8.8CVSS8.3AI score0.03656EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2026-40453

Riproduttore di Iniezione di Intestazioni Camel con Variazione di Maiuscole/Minusscole CVE-2026-40453 Questo progetto dimostra CVE-2026-40453 — una correzione incompleta per CVE-2025-27636. La correzione del 2025 ha aggiunto setLowerCasetrue a HttpHeaderFilterStrategy in modo che i nomi di...

9.9CVSS0.80855EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect è vulnerabile all'esecuzione remota di codice non autenticata nelle versioni precedenti alla 4.4.1. Si noti che questa vulnerabilità è causata dalla patch incompleta di CVE-2023-37679. PRIMO: NON SONO RESPONSABILE DI CIÒ CHE NE FARAI. SECONDO: apt-g...

9.8CVSS0.99434EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2019-1064

CVE-2019-1064 CVE-2019-1064 - AppXSVC Elevação Local de Privilégio Parece que isso pode não estar tão corrigido quanto o esperado. PoC temporariamente indisponível...

7.8CVSS7.7AI score0.06886EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco In Hyland Alfresco Community Edition =7.2.0 wurde ein Problem entdeckt. Durch das Einfügen von schädlichem Inhalt in die Datei folder.get.html.ftl kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die...

9CVSS8.2AI score0.34684EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Eine kleine Erklärung eines Apache-Pfad-Traversal-Bugs und einer unvollständigen Behebung Task 1: Ein bisschen Hintergrund... Eine kurze Geschichte Am 5. Oktober 2021 wurde eine CVE veröffentlicht, d...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits163
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 PoC de RCE do JSONPath-plus ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Configuração do Laboratório root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000...

9.8CVSS7.6AI score0.10395EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2023-43208

Vulnerabilidade de RCE no Mirth Connect CVE-2023-37679 e CVE-2023-43208 Este script de exploit e PoC foram escritos para uma análise aprofundada da CVE no vsociety. A CVE-2023-43208 é uma falha de segurança grave no NextGen Mirth Connect, uma ferramenta usada por hospitais e clínicas para...

9.8CVSS9AI score0.99434EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Attacco Descrizione È stato riscontrato che la correzione per CVE-2021-44228 in Apache Log4j 2.15.0 era incompleta in alcune configurazioni non predefinite. Ciò potrebbe consentire ad attaccanti con controllo sui dati di input del Thread Context Map MDC di creare da...

10CVSS7.4AI score0.99999EPSS
SaveExploits365
Kitploit
Kitploit
added 2026/08/26 7:09 a.m.3 views

CVE-2023-34152

CVE-2023-34152 ImageMagick 6.9.6-4 को प्रभावित करने वाली RCE कमजोरी। यह कमजोरी हमलावर को पीड़ित सिस्टम पर कमांड निष्पादित करने की अनुमति देती है। इस प्रकार, रिमोट कमांड निष्पादन संभव होता है। यह एक POC है जो fullwaywang द्वारा CVE-2023-34152 की खोज से प्रेरित है। कमजोरी का खुलासा root@kitploit:...

10CVSS7.2AI score0.49982EPSS
SaveExploits3References2
CVE
CVE
added 2026/08/25 11:39 p.m.9 views

CVE-2026-57171 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

Trestle (compliance-trestle), a Python SDK and CLI for managing OSCAL compliance documents, is affected by an arbitrary file write via path traversal in the catalog-generate, profile-generate, and ssp-generate author commands. The output argument is joined onto the Trestle root but guarded only b...

7.7CVSS6.3AI score
SaveExploits0References4
CVE
CVE
added 2026/08/25 9:49 p.m.20 views

CVE-2026-65637

Apache Tomcat is affected by an Improper Input Validation vulnerability that allows an HTTP/2 no-authority bypass of strict SNI validation . The root cause is an incomplete fix for the prior vulnerability CVE-2026-32990 . Affected versions span three branches: 11.0.20–11.0.24 , 10.1.53–10.1.57 , ...

5.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 9:33 p.m.2 views

Log4j_CVE-2021-45046

Log4j 2.15.0 Escalation dei privilegi -- CVE-2021-45046 Attacco Descrizione È stato riscontrato che la correzione per affrontare CVE-2021-44228 in Apache Log4j 2.15.0 era incompleta in determinate configurazioni non predefinite. Ciò potrebbe consentire agli aggressori con controllo sui dati di...

10CVSS7.5AI score0.99999EPSS
SaveExploits365
EUVD
EUVD
added 2026/08/25 3:16 p.m.7 views

EUVD-2026-65532

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

9.3CVSS6.6AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/08/25 2:05 p.m.8 views

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

7.5CVSS5.6AI score
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2026/08/25 9:51 a.m.3 views

httpd-2.4.49

httpd-2.4.49 critico: Path Traversal ed esecuzione remota di codice in Apache HTTP Server 2.4.49 e 2.4.50 fix incompleto di CVE-2021-41773 CVE-2021-42013...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits189
Kitploit
Kitploit
added 2026/08/25 9:12 a.m.3 views

CVE-2019-16278

Exploit per CVE-2019-16278 e CVE-2019-16279 Nostromo httpd è soggetto a 2 vulnerabilità critiche per versioni &1 Questo bug è dovuto a una correzione incompleta per CVE-2011-0751. Possiamo aggirare un controllo per che ci permette di eseguire con argomenti arbitrari...

9.8CVSS8.3AI score0.99033EPSS
SaveExploits28
Cvelist
Cvelist
added 2026/08/25 7:33 a.m.23 views

CVE-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...

6.5CVSS0.00338EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 7:17 a.m.8 views

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

8.5CVSS0.00654EPSS
SaveExploits0References2
Rows per page
Query Builder